VDB

CVE-2017-12185

CVE-2017-12185 PUBLISHED CVSS 9.800000190734863 CRITICAL

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

EPSS 4.17% · 90.5th percentile

Risk Scores

CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
4.17%
90.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSxorg-server2:1.18.4-0ubuntu0.4, *, *
Ubuntu:14.04:LTSxorg-server-lts-xenial*, 2:1.18.3-1ubuntu2.2~trusty1, 2:1.18.3-1ubuntu2.2~trusty3
Ubuntu:14.04:LTSxorg-server2:1.14.3-3ubuntu3, 2:1.14.3-5ubuntu1, 2:1.14.4-1ubuntu1
Ubuntu:16.04:LTSxorg-server-hwe-16.042:1.19.3-1ubuntu1~16.04.3, 2:1.19.3-1ubuntu1~16.04.2, 2:1.18.4-1ubuntu6.1~16.04.2

Timeline

  • Oct 12, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score
  • Jan 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›